Privacy Policy (GDPR)
Last updated: December 21, 2024
This Privacy Policy describes how Runelynxz ("we", "us", or "our") collects, uses, stores, and protects personal data when you use our website at runelynxz.com and related services. We are committed to protecting your privacy and handling your data in accordance with applicable data protection regulations, including the General Data Protection Regulation (GDPR).
1. Data Controller
The data controller responsible for your personal data is:
2. What Data We Collect
We may collect and process the following categories of personal data:
2.1 Data You Provide Directly
- Full name and contact details (email address, phone number)
- Account registration information
- Payment and billing information (processed via secure third-party providers)
- Messages and communications you send to us
- Workshop enrollment and participation data
2.2 Data Collected Automatically
- IP address and approximate geographic location
- Browser type and version
- Device type and operating system
- Pages visited, time spent, and navigation paths
- Referring URLs and exit pages
- Cookie identifiers and session data
2.3 Data From Third Parties
- Information from authentication providers if you use social login
- Analytics data from integrated service providers
3. Legal Basis for Processing
We process your personal data on the following legal grounds:
| Purpose | Legal Basis |
|---|---|
| Providing and managing your account and services | Performance of a contract |
| Processing payments | Performance of a contract |
| Responding to inquiries and support requests | Legitimate interest / contract |
| Sending service-related communications | Performance of a contract |
| Sending marketing and promotional communications | Consent |
| Improving platform functionality and user experience | Legitimate interest |
| Complying with legal obligations | Legal obligation |
| Analytics and performance monitoring | Legitimate interest |
4. How We Use Your Data
We use collected personal data to:
- Create and manage your user account
- Deliver workshop content, assignments, and interactive features
- Process registrations and payments
- Communicate with you about your account, purchases, and platform updates
- Send newsletters or promotional materials where you have given consent
- Monitor and improve platform performance and security
- Comply with applicable legal obligations and enforce our terms
- Prevent fraud and unauthorized access
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to operate and improve our services. Cookies are small text files stored on your device.
5.1 Types of Cookies We Use
- Essential cookies: Required for the platform to function correctly. Cannot be disabled.
- Functional cookies: Remember your preferences and settings.
- Analytics cookies: Help us understand how users interact with the platform.
- Marketing cookies: Used to deliver relevant communications, only with your consent.
5.2 Managing Cookies
You can control and manage cookies through your browser settings. Disabling certain cookies may affect the functionality of the platform. Where required by law, we obtain your consent before placing non-essential cookies.
6. Data Sharing and Third Parties
We do not sell your personal data. We may share data with trusted third parties only under the following circumstances:
- Service providers: Companies that assist us in operating the platform, processing payments, sending emails, or analyzing usage — bound by data processing agreements.
- Legal requirements: When required to comply with applicable law, court orders, or governmental requests.
- Business transfers: In connection with a merger, acquisition, or sale of assets, where your data may be transferred as part of the transaction.
- With your consent: For any other purpose where you have explicitly agreed.
All third-party processors are required to implement appropriate technical and organizational measures to protect your data.
7. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by relevant authorities, to maintain an equivalent level of data protection.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
- Active account data: retained for the duration of your account
- Transaction records: retained as required by applicable accounting and legal obligations
- Communication records: retained for a reasonable period to resolve disputes or support requests
- Analytics data: retained in aggregated or anonymized form after the retention period
When data is no longer required, it is securely deleted or anonymized.
9. Your Rights
Under applicable data protection law, you have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your personal data under certain conditions.
- Right to restriction: Request that we limit how we process your data in certain circumstances.
- Right to data portability: Receive your data in a structured, machine-readable format.
- Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
- Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
- Right to lodge a complaint: File a complaint with the relevant supervisory authority in your jurisdiction.
To exercise any of these rights, please contact us at contact@runelynxz.com. We will respond within the timeframe required by applicable law, generally within 30 days.
10. Data Security
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit, access controls, regular security assessments, and staff training on data protection practices.
Despite our efforts, no method of transmission over the internet or electronic storage is completely secure. We encourage you to use strong passwords and keep your account credentials confidential.
11. Children's Privacy
Our services are not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will take steps to delete such information.
12. Links to Third-Party Websites
Our platform may contain links to external websites or services not operated by us. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any external sites you visit.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through a prominent notice on the platform.
Your continued use of our services after any changes constitutes your acknowledgment of the updated policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Siilivahe 6, 26200 Rauma, Finland
Email: contact@runelynxz.com
Phone: +358 34 711 000
Website: runelynxz.com